Description
nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
Remediation
References
Related Vulnerabilities
WordPress Plugin Email Queue by BestWebSoft Cross-Site Scripting (1.1.1)
Oracle Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2001-1371)
Oracle JRE CVE-2012-5088 Vulnerability (CVE-2012-5088)
Internet Information Services Other Vulnerability (CVE-1999-1223)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1524)